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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please AMEND claims 1, 8, 15 and 16, and ADD new claim 17 in accordance with the 
following: 

1. (CURRENTLY AMENDED) A cipher designing apparatus for designing cipher 
logic of a cipher device that effects cipher or decryption per block by using an F-function for 
converting input bits to output bits by m e ans o f using a plurality of S-boxes, said cipher designing 
apparatus comprising: 

a selecting unit which selects an input and output bit number of said plurality of S-boxes 
based on a memory capacity of a high-speed referable memory provided to said cipher device^ 
minimum input and output number of the S-boxes and an entire input and output number of the 
block : and 

a S-box generating unit which generates a plurality of S-boxes each having the input and 
output bit number selected by said selecting unit. 

2. (ORIGINAL) The cipher designing apparatus according to claim 1 , further 
comprising a F-function generating unit which generates an F-function having said plurality of S- 
boxes generated by said S-box generating unit. 

3. (ORIGINAL) The cipher designing apparatus according to claim 1 , wherein said 
selecting unit selects the input and output bit number of each S-box in such a manner that a sum 
of sizes of said plurality of S-boxes becomes largest within a memory capacity of a primary 
cache memory installed in a processor provided to said cipher device. 

4. (ORIGINAL) The cipher designing apparatus according to claim 3, wherein said 
selecting unit includes: 

an input unit which inputs the memory capacity of said primary cache memory and an 
entire input and output bit number of said block; 



2 



1 



Serial No. 09/739,219 

a tentative decision unit which tentatively decides an input and output number of each S- 
box by generating an input and output number of each S-box by dividing the entire input and 
output bit number of said block inputted from said input unit and allocating a remainder to the 
input and output number of an arbitrary S-box; and 

a combining unit which combines the input and output numbers of the S-boxes tentatively 
decided by said tentative decision unit within the memory capacity of said primary cache 
memory. 

5. (ORIGINAL) The cipher designing apparatus according to claim 1 , further 
comprising a smallest input and output number specifying unit which specifies a smallest value 
of the input and output number of said plurality of S-boxes. 

6. (ORIGINAL) The cipher designing apparatus according to claim 4, wherein said 
combining unit completes combining of the input and output numbers based on a final value 
determined by the entire jnput and output bit number of said block and the memory capacity of 
said primary cache memory. 

7. (ORIGINAL) The cipher designing apparatus according to claim 4, wherein said 
tentative decision unit tentatively decides the input and output number of each S-box by 
allocating said remainder, if there is any, to the input and output numbers of the S-boxes that are 
placed apart at remotest positions. 

8. (CURRENTLY AMENDED) A cipher designing method for designing cipher logic 
of a cipher device that effects cipher or decryption per block by using an F-function for 
converting input bits to output bits by m e ans o f using a plurality of S-boxes, the method 
comprising th e st e ps of : 

selecting an input and output bit number of said plurality of S-boxes based on a memory 
capacity of a high-speed referable memory provided to said cipher device , a minimum input and 
output number of the S-boxes and an entire input and output number of the block : and 

generating a plurality of S-boxes each having the input and output bit number selected-at 
th e i nput and output b i t numb e r s e l e ct i ng st e p . 

9. (CURRENTLY AMENDED) The cipher designing method according to claim 8, 
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further comprising: 

th e stop of generating an F-function having said plurality of S-boxes generated at th e S - 
box e s gen e rating st e p . 

10. (CURRENTLY AMENDED) The cipher designing method according to claim 8, 
whereinT when at-the input and output bit number s e l e cting st e p are selected , the input and 
output bit number of each S-box is selected in such a manner that a sum of sizes of said plurality 
of S-boxes becomes largest within a memory capacity of a primary cache memory installed in a 
processor provided to said cipher device. 

11. (ORIGINAL) The cipher designing method according to claim 10, wherein 
selecting the input and output bit number sele ct i ng s t e p includes th e st e ps of : 

inputting the memory capacity of said primary cache memory and an entire input and 
output bit number of said block; 

tentatively deciding an input and output number of each S-box by generating an input 
and output number of each S-box by dividing the entire input and output bit number of said block 
inputted in the memory capacity i nputt i ng st e p and allocating a remainder to the input and output 
number of an arbitrary S-box; and 

combining the input and output numbers of the S-boxes tentatively decided at th e 
t e ntat i v el y d e cid i ng st e p w ithin the memory capacity of said primary cache memory. 

12. (CURRENTLY AMENDED) The cipher designing method according to claim 8, 
further comprising th e st e p of : 

specifying a smallest value of the input and output number of said plurality of S-boxes. 

1 3. (CURRENTLY AMENDED) The cipher designing method according to claim 1 1 , 
wherein the combining at th e comb i n i ng s t e p is completed based on a final value determined by 
the entire input and output bit number of said block and the memory capacity of said primary 
cache memory. 

14. (CURRENTLY AMENDED) The cipher designing method according to claim 11, 
wherein- when aWhe-tentatively deciding-step input and output number , the input and output 
number of each S-box is tentatively decided by allocating said remainder, if there is any, to the 
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input and output numbers of the S-boxes that are placed apart at remotest positions. 

15. (CURRENTLY AMENDED) A computer readable medium for storing instructions, 
which when executed by a computer, causes the computer to realizes a cipher designing 
method for designing cipher logic of a cipher device that effects cipher or decryption per block by 
using an F-function for converting input bits to output bits by m e ans o f usinq a plurality of S- 
boxes, the method comprising th e st e p s of : 

selecting an input and output bit number of said plurality of S-boxes based on a memory 
capacity of a high-speed referable memory provided to said cipher device , a minimum input and 
output number of the S-boxes and an entire input and output number of the block : and 

generating a plurality of S-boxes each having the input and output bit number selected-at 
sa i d s ele ct i ng st e p . 

16. (CURRENTLY AMENDED) A cipher designing method for designing cipher logic of a 
cipher device using an F-function to convert input bits to output bits via S-boxes, comprising: 

generating a plurality of S-boxes each having an input and an output bit number selected 
based on memory capacity of a memory provided to the cipher device, whefe-the input and 
output bit number are -being selected by extracting a set of input and output numbers of the S- 
boxes based on an entire input and output bit number of a block and a minimum input and 
output number of the S-boxes: and 

determining a combination set based on the memory capacity provided to the cipher 

device. 

17. (NEW) A method of designing cipher logic of a cipher device using an F-function for 
converting input bits to output bits, comprising: 

determining an optimal input and output number of the S-boxes by generating a 
combination table having various sets of input and output numbers of the S-boxes enclosable in 
a memory of the cipher device; and 

implementing the F-function by selecting one of the sets of input and output numbers of 
the S-boxes in the combination table. 
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